some of my experiences -

- load those images over an ssl link. It is possible to load data from a
secured link through an unsecured url in flex.
- do not expose the actual image url over a file server/ftp server. Rather
use some server side scripting(http handler) over a secure link which
actually accepts an authentication token per call.See my post here about
that-

http://tech.groups.yahoo.com/group/flexcoders/message/152226

This script would be on a server which then makes a contact with the file
server in the intranet. In this way your fileserver is never directly
exposed to potential attacks over the web.

- the authentication should be renewed with each call through a relay
mechanism so that the same request cannot be replayed again.

~Peeyush
http://www.mds.asia



On Fri, Feb 26, 2010 at 5:32 PM, Christophe
<christophe_jacque...@yahoo.fr>wrote:

>
>
> Hello,
>
> For a photo editing application which has photos coming from customers.
>
> Where to store customers photos to keep confidentiality, and how to call
> them in the Flex application to display ?
>
> Thank you,
> Christophe,
>
>  
>

Reply via email to